From 2b70c5e5ae2f229e4a91199c4461dfc64a65ebd7 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Thu, 28 Nov 2019 12:06:27 +0300 Subject: [PATCH] Add RODATA_FULL_DEFAULT_ENABLED for ARM64 --- kconfig-hardened-check.py | 1 + 1 file changed, 1 insertion(+) diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index 5a384d0..cb176bc 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -192,6 +192,7 @@ def construct_checklist(checklist, arch): if debug_mode or arch == 'ARM64': checklist.append(OptCheck('UNMAP_KERNEL_AT_EL0', 'y', 'defconfig', 'self_protection')) checklist.append(OptCheck('HARDEN_EL2_VECTORS', 'y', 'defconfig', 'self_protection')) + checklist.append(OptCheck('RODATA_FULL_DEFAULT_ENABLED', 'y', 'defconfig', 'self_protection')) if debug_mode or arch == 'X86_64' or arch == 'ARM64': checklist.append(OptCheck('VMAP_STACK', 'y', 'defconfig', 'self_protection')) if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32': -- 2.31.1